openyida 2026.10.22 → 2026.10.23

package/README.md

@@ -516,6 +516,7 @@ When preparing a PR that needs a personal Fork, or when you ask how to support t
 | `openyida print-template <list\|inspect\|fields\|build\|create\|copy\|save\|restore\|settings\|status\|order\|render\|files> <appType> <formUuid> [templateId] [--config <file>] [--scene <order\|quotation\|delivery\|receipt\|approval\|codes>] [--bindings <file>] [--name <title>] [--expected-hash <hash>] [--backup <file>] [--out <file>] [--status START\|STOP] [--instance <id>] [--page <n>] [--size <n>] [--allow-permission-change] [--json] \| print-template <list\|render> --detail-url <url> [--template-id <id>] [--json]` | Manage native YiDA print templates, generate document layouts, back up, restore and request PDFs |
 | `openyida form-view <list\|inspect\|save\|create\|order> <appType> <formUuid> [viewUuid] [--config <file>] [--name <title>] [--with-config] [--expected-hash <hash>] [--backup <file>] [--replace] [--json]` | Native form views: list, inspect and configure columns, widths, frozen columns and filters |
 | `openyida custom-button <list\|inspect\|options\|create\|update\|delete> <appType> <formUuid> [buttonUuid] [--config <file>] [--expected-hash <hash>] [--backup <file>] [--yes] [--json]` | Native custom buttons: inspect and configure form edits, automation flows and page links |
+| `openyida form-message <list\|inspect\|options\|create\|update\|delete> <appType> <formUuid> [messageId] [--config <file>] [--expected-hash <hash>] [--backup <file>] [--yes] [--json]` | Native form notifications: inspect triggers, recipients and templates, then safely maintain bindings |
 | `openyida get-schema <appType> <formUuid\|--all> [--summary-json\|--field-map-json\|--analysis-json]` | Get one form Schema or all form Schemas |
 | `openyida check-prd-completeness <prd.md> --app-type <appType> [--build-manifest <file>] [--json]` | Check resources, frontend menu hiding and application theme delivery |
 | `openyida check-design <design.md> [--prd <prd.md>] [--base-dir <dir>] [--json]` | Validate design documents, theme tokens and PRD handoff |

package/bin/yida.js

@@ -837,6 +837,11 @@ async function main() {
       await run(args);
       break;
     }
+    case 'form-message': {
+      const { run } = require('../lib/app/form-message');
+      await run(args);
+      break;
+    }
     case 'print-template': {
       const { run } = require('../lib/print-template/print-template');
       await run(args);

package/lib/app/form-message.js

@@ -0,0 +1,352 @@
+'use strict';
+
+const crypto = require('crypto');
+const fs = require('fs');
+const path = require('path');
+const { isDeepStrictEqual } = require('util');
+const { CliError } = require('../core/cli-error');
+const { t } = require('../core/i18n');
+const { resolveProjectRoot } = require('../core/utils');
+const { createYidaClient } = require('../core/yida-client');
+
+const ACTIONS = ['list', 'inspect', 'options', 'create', 'update', 'delete'];
+const RECEIVER_TYPES = new Set(['employee', 'role', 'formField', 'variable']);
+const FORM_TRIGGERS = new Set(['FORM_DATA_CREATE', 'FORM_DATA_EDIT', 'FORM_DATA_DELETE', 'FORM_COMMENT']);
+const SYSTEM_VARIABLES = new Set(['originator']);
+const MESSAGE_FIELD_COMPONENTS = new Set([
+  'TextareaField', 'EmployeeField', 'SelectField', 'MultiSelectField', 'DateField', 'TextField',
+  'RadioField', 'NumberField', 'CheckboxField', 'RateField', 'CascadeDateField', 'DepartmentSelectField',
+]);
+const RECIPIENT_FIELD_COMPONENTS = new Set(['EmployeeField']);
+const ID = /^[A-Za-z0-9_-]+$/;
+const TEMPLATES = Object.freeze({
+  workNotice: { uuid: 'system_default_work_notice', type: 'workNotice', content: true, target: 'person' },
+  detailImage: { uuid: '8fbf8a81-c775-4570-b367-86d4d719a85f', type: 'card', fields: true, target: 'person' },
+  imageCard: { uuid: '39caf717-df43-46e1-98f9-564fdd1dc789', type: 'card', content: true, target: 'person' },
+  detailText: { uuid: '97bd36d0-64d8-4c50-96e8-f02312655700', type: 'card', fields: true, target: 'person' },
+  commentCard: { uuid: 'c298cd88-0de6-44c3-9023-c93e0d7db9ac', type: 'card', content: true, target: 'person' },
+  pinnedImage: { uuid: 'cdcdf076-3625-4da7-9a61-571591594209', type: 'ceilingCard', content: true, target: 'group' },
+  pinnedText: { uuid: '68240de5-8d9e-416a-b5b2-c71dca0ab703', type: 'ceilingCard', content: true, target: 'group' },
+});
+const TEMPLATE_BY_UUID = new Map(Object.entries(TEMPLATES).map(([key, item]) => [item.uuid, { key, ...item }]));
+
+const object = value => value !== null && typeof value === 'object' && !Array.isArray(value);
+const clone = value => JSON.parse(JSON.stringify(value));
+
+/** Build a stable fingerprint for concurrency checks and destructive actions. */
+function hash(value) {
+  const stable = item => Array.isArray(item) ? item.map(stable) : object(item)
+    ? Object.fromEntries(Object.keys(item).sort().map(key => [key, stable(item[key])])) : item;
+  return crypto.createHash('sha256').update(JSON.stringify(stable(value))).digest('hex');
+}
+
+function fail(code, key, detail = '', details) {
+  throw new CliError(t(`form_message.${key}`, detail), { code: `FORM_MESSAGE_${code}`, details });
+}
+
+function safe(value) {
+  if (!value || typeof value !== 'object') {return;}
+  for (const key of Object.keys(value)) {
+    if (['__proto__', 'prototype', 'constructor'].includes(key)) {fail('INVALID_CONFIG', 'invalid_config', key);}
+    safe(value[key]);
+  }
+}
+
+function parseJson(value, label) {
+  try { return typeof value === 'string' ? JSON.parse(value) : value; }
+  catch (_) { return fail('INVALID_CONFIG', 'invalid_config', label); }
+}
+
+function unwrap(response, endpoint) {
+  if (!response || response.success !== true || response.__needLogin || response.__csrfExpired || response.content === false) {
+    fail('API_ERROR', 'api_error', response?.errorMsg || response?.message || endpoint, {
+      endpoint, platformErrorCode: response?.errorCode || null, needLogin: !!response?.__needLogin,
+    });
+  }
+  return response.content;
+}
+
+/** Normalize a native binding while retaining fields required for lossless backup and update. */
+function normalize(raw) {
+  if (!object(raw) || raw.id === undefined || raw.id === null || !String(raw.id).trim()) {
+    fail('INVALID_RESPONSE', 'invalid_response', 'id');
+  }
+  const cardConfig = raw.cardConfig ? parseJson(raw.cardConfig, 'cardConfig') : {};
+  if (!object(cardConfig)) {fail('INVALID_RESPONSE', 'invalid_response', 'cardConfig');}
+  const recipients = [];
+  const add = (source, type) => String(source || '').split(',').map(value => value.trim()).filter(Boolean)
+    .forEach(value => recipients.push({ type, value }));
+  add(raw.persons, 'employee'); add(raw.roleId, 'role'); add(raw.formField, 'formField'); add(raw.variable, 'variable');
+  const nativeGroups = Array.isArray(cardConfig.groups) ? clone(cardConfig.groups) : [];
+  const template = TEMPLATE_BY_UUID.get(cardConfig.templateUuid) || {};
+  const buttons = Array.isArray(cardConfig.buttons) ? clone(cardConfig.buttons) : [];
+  return {
+    id: String(raw.id),
+    formUuid: raw.formUuid || null,
+    trigger: raw.phase || null,
+    messageType: raw.messageType || 'NORMAL',
+    recipients,
+    groups: nativeGroups,
+    template: {
+      key: template.key || null,
+      uuid: cardConfig.templateUuid || raw.messageUuid || null,
+      type: cardConfig.templateType || template.type || null,
+      title: cardConfig.cardTitle || '',
+      content: cardConfig.mainContent || '',
+      fields: Array.isArray(cardConfig.datas) ? clone(cardConfig.datas) : [],
+      image: Array.isArray(cardConfig.messageImage) ? clone(cardConfig.messageImage) : [],
+      contentType: cardConfig.messageContentType || (raw.messageUuid ? 'TEMPLATE' : 'CUSTOM'),
+      platformTemplateUuid: raw.messageUuid && !String(raw.messageUuid).includes('#') ? raw.messageUuid : null,
+      button: buttons[0] || null,
+    },
+    advanced: {
+      openMore: !!cardConfig.openMore,
+      activityIds: String(raw.activityId || '').split(',').filter(Boolean),
+      condition: raw.conditionJson ? parseJson(raw.conditionJson, 'conditionJson') : null,
+      processId: raw.processId || null,
+      outcome: String(raw.outResult || '').split(',').filter(Boolean),
+      currentGroup: raw.curDingGroup === 'y',
+      sendWorkNotice: raw.isSendMessage === 'y',
+    },
+    native: clone(raw),
+  };
+}
+
+function parseArgs(args) {
+  const positional = [];
+  const flags = {};
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (Object.hasOwn(flags, arg)) {fail('USAGE', 'usage');}
+    if (['--json', '--yes', '--help', '-h'].includes(arg)) { flags[arg] = true; continue; }
+    if (['--config', '--backup', '--expected-hash'].includes(arg)) {
+      if (!args[i + 1] || args[i + 1].startsWith('-')) {fail('USAGE', 'usage');}
+      flags[arg] = args[++i]; continue;
+    }
+    if (arg.startsWith('-')) {fail('USAGE', 'usage');}
+    positional.push(arg);
+  }
+  if (flags['--help'] || flags['-h']) {return { help: true };}
+  const [action, appType, formUuid, messageId] = positional;
+  const targeted = ['inspect', 'update', 'delete'].includes(action);
+  if (!ACTIONS.includes(action) || positional.length !== (targeted ? 4 : 3)
+    || !ID.test(appType || '') || !ID.test(formUuid || '') || (targeted && !ID.test(messageId || ''))
+    || (['create', 'update'].includes(action) && !flags['--config'])
+    || (action === 'delete' && (!flags['--yes'] || !flags['--expected-hash']))) {fail('USAGE', 'usage');}
+  const allowed = { list: [], inspect: [], options: [], create: ['--config', '--backup'],
+    update: ['--config', '--backup', '--expected-hash'], delete: ['--yes', '--backup', '--expected-hash'] };
+  if (Object.keys(flags).some(key => key !== '--json' && !allowed[action].includes(key))) {fail('USAGE', 'usage');}
+  return { action, appType, formUuid, messageId, flags };
+}
+
+function fieldId(field) { return field.fieldId || field.id || field.componentId; }
+function fieldType(field) { return field.componentName || field.fieldType || field.type; }
+
+function normalizeTemplate(value) {
+  if (!object(value)) {fail('INVALID_CONFIG', 'invalid_config', 'template');}
+  const registry = value.key ? TEMPLATES[value.key] : TEMPLATE_BY_UUID.get(value.uuid);
+  if (!registry || (value.uuid && value.uuid !== registry.uuid) || (value.type && value.type !== registry.type)) {
+    fail('INVALID_CONFIG', 'invalid_config', 'template.key / template.uuid / template.type');
+  }
+  const result = { ...value, key: value.key || TEMPLATE_BY_UUID.get(registry.uuid).key,
+    uuid: registry.uuid, type: registry.type };
+  result.title = String(result.title || '').trim();
+  result.content = String(result.content || '').trim();
+  result.fields = result.fields || [];
+  result.image = result.image || [];
+  result.contentType = 'CUSTOM';
+  result.platformTemplateUuid = null;
+  result.button = result.button || null;
+  if (!result.title || result.title.replace(/\$!\{\w+\}/g, '').length > 50) {fail('INVALID_CONFIG', 'invalid_config', 'template.title');}
+  if (registry.content && !result.content) {fail('INVALID_CONFIG', 'invalid_config', 'template.content');}
+  if (registry.fields && (!Array.isArray(result.fields) || !result.fields.length)) {fail('INVALID_CONFIG', 'invalid_config', 'template.fields');}
+  if (!Array.isArray(result.fields) || !Array.isArray(result.image)) {fail('INVALID_CONFIG', 'invalid_config', 'template.fields / template.image');}
+  if (result.button !== undefined && result.button !== null) {
+    if (!object(result.button) || typeof result.button.name !== 'string'
+      || !['formInstDetail', 'comment', 'custom'].includes(result.button.type)) {fail('INVALID_CONFIG', 'invalid_config', 'template.button');}
+    if (result.button.type === 'custom') {
+      let url; try { url = new URL(result.button.value); } catch (_) { fail('INVALID_CONFIG', 'invalid_config', 'template.button.value'); }
+      if (!['https:', 'http:'].includes(url.protocol) || url.username || url.password) {fail('INVALID_CONFIG', 'invalid_config', 'template.button.value');}
+    }
+  }
+  return { result, registry };
+}
+
+/** Validate references against the target form metadata before a mutation. */
+function validateConfig(value, metadata) {
+  if (!object(value) || !FORM_TRIGGERS.has(value.trigger)) {
+    fail('UNSUPPORTED_TRIGGER', 'unsupported_trigger', value?.trigger || '');
+  }
+  const formType = metadata.form.formType;
+  if (formType === 'process') {fail('UNSUPPORTED_FORM', 'unsupported_form', formType);}
+  const { result: template, registry } = normalizeTemplate(value.template);
+  const recipients = value.recipients || [];
+  const groups = value.groups || [];
+  if (!Array.isArray(recipients) || !Array.isArray(groups)) {fail('INVALID_CONFIG', 'invalid_config', 'recipients / groups');}
+  if (registry.target === 'person' && !recipients.length) {fail('INVALID_CONFIG', 'invalid_config', 'recipients');}
+  if (registry.target === 'group' && !groups.length) {fail('INVALID_CONFIG', 'invalid_config', 'groups');}
+  if (recipients.length > 100) {fail('INVALID_CONFIG', 'invalid_config', 'recipients (max 100)');}
+  const seen = new Set();
+  for (const receiver of recipients) {
+    if (!object(receiver) || !RECEIVER_TYPES.has(receiver.type) || !ID.test(String(receiver.value || ''))
+      || seen.has(`${receiver.type}:${receiver.value}`)) {fail('INVALID_CONFIG', 'invalid_config', 'recipients');}
+    seen.add(`${receiver.type}:${receiver.value}`);
+    if (receiver.type === 'variable' && !SYSTEM_VARIABLES.has(receiver.value)) {fail('INVALID_CONFIG', 'invalid_config', `recipient variable: ${receiver.value}`);}
+    if (receiver.type === 'formField' && !metadata.recipientFields.some(field => fieldId(field) === receiver.value)) {
+      fail('INVALID_CONFIG', 'invalid_config', `recipient field: ${receiver.value}`);
+    }
+  }
+  for (const group of groups) {
+    if (!object(group) || !ID.test(String(group.cid || group.id || ''))) {fail('INVALID_CONFIG', 'invalid_config', 'groups');}
+  }
+  for (const item of template.fields) {
+    if (!object(item) || !['variable', 'formField'].includes(item.type) || typeof item.title !== 'string' || !item.title.trim()
+      || !ID.test(String(item.value || ''))) {fail('INVALID_CONFIG', 'invalid_config', 'template.fields');}
+    if (item.type === 'variable' && !metadata.systemFields.some(field => field.value === item.value)) {
+      fail('INVALID_CONFIG', 'invalid_config', `template variable: ${item.value}`);
+    }
+    if (item.type === 'formField' && !metadata.messageFields.some(field => fieldId(field) === item.value)) {
+      fail('INVALID_CONFIG', 'invalid_config', `template field: ${item.value}`);
+    }
+  }
+  return { trigger: value.trigger, recipients: clone(recipients), groups: clone(groups), template };
+}
+
+function patchConfig(base, patch) {
+  if (!object(patch) || !Object.keys(patch).length || Object.keys(patch).some(key => !['trigger', 'recipients', 'groups', 'template'].includes(key))) {
+    fail('INVALID_CONFIG', 'invalid_config', 'trigger, recipients, groups, template');
+  }
+  safe(patch);
+  const next = { ...base, ...patch };
+  if (patch.template) {next.template = { ...base.template, ...patch.template };}
+  return next;
+}
+
+function editable(message) {
+  return { trigger: message.trigger, recipients: clone(message.recipients), groups: clone(message.groups), template: clone(message.template) };
+}
+
+function serialize(config, formUuid, messageId, native = {}) {
+  const byType = type => config.recipients.filter(item => item.type === type).map(item => item.value).join(',');
+  const registered = config.template.key ? TEMPLATES[config.template.key] : TEMPLATE_BY_UUID.get(config.template.uuid);
+  const nativeCardConfig = native.cardConfig ? parseJson(native.cardConfig, 'cardConfig') : {};
+  const cardConfig = {
+    ...nativeCardConfig,
+    openMore: false,
+    groups: config.groups,
+    messageImage: config.template.image,
+    cardTitle: config.template.title,
+    mainContent: config.template.content,
+    datas: config.template.fields,
+    templateUuid: config.template.uuid || registered.uuid,
+    templateType: config.template.type || registered.type,
+    messageContentType: 'CUSTOM',
+    buttons: config.template.button ? [config.template.button] : [],
+  };
+  return {
+    ...clone(native),
+    service: native.service || '', formUuid, phase: config.trigger, outResult: native.outResult || '',
+    formField: byType('formField'), studentField: native.studentField || '', roleId: byType('role'),
+    persons: byType('employee'), varField: native.varField || '', messageUuid: '', id: messageId || '',
+    variable: byType('variable'), email: native.email || '', formFieldEmail: native.formFieldEmail || '',
+    activityId: native.activityId || '', messageType: native.messageType || 'NORMAL',
+    curDingGroup: native.curDingGroup || 'n', isSendMessage: native.isSendMessage || 'n',
+    processId: native.processId || '', conditionJson: native.conditionJson || '', cardConfig: JSON.stringify(cardConfig),
+  };
+}
+
+async function execute(parsed, client = createYidaClient()) {
+  const { action, appType, formUuid, messageId, flags } = parsed;
+  const prefix = `/${appType}/query/`;
+  const read = async (endpoint, params = {}) => unwrap(await client.get(prefix + endpoint, { formUuid, ...params }), endpoint);
+  const list = async () => {
+    const rows = await read('formMsgTpl/listFormMessageBind.json');
+    if (!Array.isArray(rows)) {fail('INVALID_RESPONSE', 'invalid_response', 'messages');}
+    const messages = rows.map(normalize);
+    if (messages.some(item => item.formUuid && item.formUuid !== formUuid)
+      || new Set(messages.map(item => item.id)).size !== messages.length) {fail('INVALID_RESPONSE', 'invalid_response', 'messages');}
+    return messages;
+  };
+  const metadata = async () => {
+    const info = await read('formdesign/getFormAndAppInfo.json', { appType });
+    const form = info?.formDatas?.values?.find(item => item.formUuid === formUuid);
+    if (!form || !Array.isArray(form.fields)) {fail('INVALID_RESPONSE', 'invalid_response', 'form metadata');}
+    const fields = form.fields;
+    return {
+      form: { formUuid, formType: form.formType, title: form.title, processCode: form.processCode || null },
+      triggers: [...FORM_TRIGGERS],
+      readOnlyTriggers: ['RECUR_JOB_FIELD', 'INST_START', 'INST_COMPLETE', 'INST_NODE', 'TASK_GENERATE', 'TASK_COMPLETED'],
+      templates: Object.entries(TEMPLATES).map(([key, item]) => ({ key, ...item })),
+      systemFields: [
+        { value: 'formInstId', componentName: 'TextField' }, { value: 'originatorName', componentName: 'TextField' },
+        { value: 'originator', componentName: 'TextField' }, { value: 'createTime', componentName: 'DateField' },
+        { value: 'modifiedTime', componentName: 'DateField' }, { value: 'serialNo', componentName: 'TextField' },
+        { value: 'formTitle', componentName: 'TextField' }, { value: 'title', componentName: 'TextField' },
+      ],
+      messageFields: fields.filter(field => MESSAGE_FIELD_COMPONENTS.has(fieldType(field))),
+      recipientFields: fields.filter(field => RECIPIENT_FIELD_COMPONENTS.has(fieldType(field))),
+      recipientVariables: [...SYSTEM_VARIABLES],
+      supportsToggle: false,
+    };
+  };
+  // Link to the form's native notification settings in the authenticated environment.
+  const configUrl = new URL(`/${appType}/admin/${formUuid}/settings/messageSetting`, client.getAuthRef().baseUrl).href;
+  const output = { success: true, action, appType, formUuid, configUrl };
+  if (action === 'options') {return { ...output, options: await metadata() };}
+  const beforeList = await list();
+  const before = messageId ? beforeList.find(item => item.id === messageId) : null;
+  if (messageId && !before) {fail('NOT_FOUND', 'not_found', messageId);}
+  if (action === 'list') {return { ...output, messages: beforeList, totalCount: beforeList.length, supportsToggle: false };}
+  if (action === 'inspect') {return { ...output, messageId, message: before, configHash: hash(editable(before)), supportsToggle: false };}
+  if (flags['--expected-hash'] && flags['--expected-hash'] !== hash(editable(before))) {fail('CONFLICT', 'conflict');}
+
+  let expected;
+  if (action !== 'delete') {
+    let patch;
+    try { patch = parseJson(fs.readFileSync(path.resolve(flags['--config']), 'utf8'), 'config'); }
+    catch (error) { if (error instanceof CliError) {throw error;} fail('INVALID_CONFIG', 'invalid_config', 'config file'); }
+    const defaults = { trigger: 'FORM_DATA_CREATE', recipients: [{ type: 'variable', value: 'originator' }], groups: [],
+      template: { key: 'workNotice', title: '', content: '', fields: [], image: [], button: null } };
+    expected = validateConfig(patchConfig(before ? editable(before) : defaults, patch), await metadata());
+    if (before && isDeepStrictEqual(editable(before), expected)) {
+      return { ...output, messageId, changed: false, message: before, configHash: hash(expected), readbackVerified: true };
+    }
+  }
+  const snapshot = beforeList.map(item => [item.id, hash(item.native)]);
+  if (!isDeepStrictEqual(snapshot, (await list()).map(item => [item.id, hash(item.native)]))) {fail('CONFLICT', 'conflict');}
+  const backupPath = flags['--backup'] ? path.resolve(flags['--backup']) : path.join(resolveProjectRoot().projectRoot,
+    '.cache', 'openyida', 'form-message', `${Date.now()}-${crypto.randomUUID()}.json`);
+  fs.mkdirSync(path.dirname(backupPath), { recursive: true });
+  fs.writeFileSync(backupPath, JSON.stringify({ appType, formUuid, action, messages: beforeList }, null, 2), { flag: 'wx', mode: 0o600 });
+  const details = { target: { appType, formUuid, ...(messageId ? { messageId } : {}) }, backupPath,
+    retrySafe: false, sideEffectState: 'unknown', readbackAllowed: true };
+  const endpoint = action === 'delete' ? 'formMsgTpl/removeMessageBind.json' : 'formMsgTpl/saveOrUpdateMessageBind.json';
+  const params = action === 'delete' ? { id: messageId } : serialize(expected, formUuid, messageId, before?.native);
+  try { unwrap(await client.postFormOnce(prefix + endpoint, params), endpoint); }
+  catch (error) { throw new CliError(error.message, { code: error.code || 'FORM_MESSAGE_WRITE_FAILED', details: { ...error.details, ...details } }); }
+  try {
+    const after = await list();
+    if (action === 'delete') {
+      if (after.some(item => item.id === messageId)) {fail('READBACK_MISMATCH', 'readback_mismatch');}
+      return { ...output, messageId, changed: true, backupPath, readbackVerified: true };
+    }
+    const added = after.filter(item => !beforeList.some(old => old.id === item.id));
+    const saved = action === 'create' ? (added.length === 1 ? added[0] : null) : after.find(item => item.id === messageId);
+    if (!saved || !isDeepStrictEqual(editable(saved), expected)) {fail('READBACK_MISMATCH', 'readback_mismatch');}
+    return { ...output, messageId: saved.id, changed: true, backupPath, readbackVerified: true,
+      message: saved, configHash: hash(expected) };
+  } catch (error) {
+    throw new CliError(error.message, { code: error.code || 'FORM_MESSAGE_READBACK_FAILED',
+      details: { ...details, mutationAccepted: true, sideEffectState: 'accepted_unverified' } });
+  }
+}
+
+async function run(args, options = {}) {
+  const parsed = parseArgs(args);
+  if (parsed.help) { process.stdout.write(t('form_message.usage') + '\n'); return; }
+  const result = await execute(parsed, options.client);
+  process.stdout.write(JSON.stringify(result, null, 2) + '\n');
+  return result;
+}
+
+module.exports = { ACTIONS, TEMPLATES, run, execute, parseArgs, normalize, validateConfig, patchConfig, serialize, hash, editable };

package/lib/core/command-manifest.js

@@ -549,6 +549,12 @@ const COMMAND_SIDE_EFFECTS = new Map([
     read_actions: ['list', 'inspect', 'options'],
     mutating_actions: ['create', 'update', 'delete'],
   })],
+  ['form-message', sideEffect('mixed', {
+    mutates_yida: true,
+    mutates_local: true,
+    read_actions: ['list', 'inspect', 'options'],
+    mutating_actions: ['create', 'update', 'delete'],
+  })],
   ['cool-card', sideEffect('mixed', { mutates_yida: true, mutates_local: true, read_actions: ['list', 'templates', 'get'], mutating_actions: ['create'] })],
   ['data-card', sideEffect('mixed', { mutates_yida: true, mutates_local: true, read_actions: ['list', 'get', 'probe', 'release-check', 'refs'], mutating_actions: ['create', 'save', 'publish', 'release-get', 'release-save', 'release-test'], note: 'release-get reads broadcast settings but the native backend may initialize the application cool app; classify it conservatively as a possible mutation.' })],
   ['print-template', sideEffect('mixed', printTemplateEffects)],
@@ -863,6 +869,13 @@ const COMMAND_PERMISSIONS = new Map([
     ask_actions: ['delete'],
   })),
 
+  ...permissionEntries([
+    'form-message',
+  ], actionDependentPermission({
+    preauthorized_actions: ['create', 'update'],
+    ask_actions: ['delete'],
+  })),
+
   ...permissionEntries([
     'aggregate-table',
   ], actionDependentPermission({
@@ -1638,6 +1651,19 @@ const COMMAND_GROUPS = [
         examples: ['openyida custom-button options APP_XXX FORM_XXX --json', 'openyida custom-button create APP_XXX FORM_XXX --config button.json --json'],
         notes: ['Manages native form custom buttons: edit current fields, fill an associated form, invoke a published manual custom-button flow (type 6), or open a page. options reads eligible fields, conditions, forms, flows and display locations. Updates merge action properties and translations; arrays and permissionConfig replace. Changing action type, fillType or urlType requires a complete new actionConfig. Saves back up first and verify by readback; writes are never replayed automatically. delete permanently removes the button definition and requires --yes and --expected-hash from inspect. This differs from removing a display reference. Platform permissions, edition limits, 10-button limit, and completed-process restrictions still apply. No runtime button execution. See docs/guides/custom-buttons.md.'],
       }),
+      command('form-message', ['form-message'], 'form-message <list|inspect|options|create|update|delete> <appType> <formUuid> [messageId] [--config <file>] [--expected-hash <hash>] [--backup <file>] [--yes] [--json]', 'help.cmd_form_message', {
+        managedRun: { scope: 'actions', actions: {
+          list: { scope: 'app', appPosition: 1 },
+          inspect: { scope: 'app', appPosition: 1 },
+          options: { scope: 'app', appPosition: 1 },
+          create: { scope: 'app', appPosition: 1, mutation: { operation: 'update_form', formUuidPosition: 2 } },
+          update: { scope: 'app', appPosition: 1, mutation: { operation: 'update_form', formUuidPosition: 2 } },
+          delete: { scope: 'app', appPosition: 1, mutation: { operation: 'update_form', formUuidPosition: 2 } },
+        } },
+        output: 'json',
+        examples: ['openyida form-message options APP_XXX FORM_XXX --json', 'openyida form-message create APP_XXX FORM_XXX --config message.json --json'],
+        notes: ['Manages native form-level message notification bindings, not application settings, custom-page messaging or integration automation. list and inspect preserve native configurations. create and update currently support verified immediate events for ordinary forms and seven native templates; scheduled and process-node writes are rejected until their rule and process context can be verified. The platform exposes no independent enable/disable state, so deletion is the only supported removal action and requires --yes plus the current inspect hash. Writes back up first, detect concurrent changes and require readback; requests are never replayed automatically. Saving a binding does not send a test message or prove delivery. See docs/guides/form-messages.md.'],
+      }),
       command('get-schema', ['get-schema'], 'get-schema <appType> <formUuid|--all> [--summary-json|--field-map-json|--analysis-json]', 'help.cmd_get_schema', { managedRun: { scope: 'app', appPosition: 0 },
         examples: ['openyida get-schema APP_XXX FORM_XXX --field-map-json'],
       }),

package/lib/core/locales/en.js

@@ -19,6 +19,17 @@ module.exports = {
     'limit': 'A form supports at most 10 custom buttons.',
     'readback_mismatch': 'Saved custom button does not match readback. Keep the backup and inspect remote state.'
   },
+  form_message: {
+    usage: 'Usage: openyida form-message <list|inspect|options|create|update|delete> <appType> <formUuid> [messageId] [--config <file>] [--expected-hash <hash>] [--backup <file>] [--yes] [--json]',
+    invalid_config: 'Invalid form message configuration or argument: {0}',
+    invalid_response: 'Incomplete platform form-message response: {0}',
+    api_error: 'Form message API failed: {0}. Check login, form administration permission, edition and feature availability.',
+    not_found: 'The message notification does not exist in the target form: {0}',
+    conflict: 'The message notification changed after it was read. Inspect again before saving.',
+    unsupported_trigger: 'This CLI has not verified writes for this trigger: {0}. Existing configurations remain readable.',
+    unsupported_form: 'This CLI has not verified notification writes for this form type: {0}. Existing configurations remain readable.',
+    readback_mismatch: 'Saved message notification does not match readback. Keep the backup and inspect remote state.',
+  },
   dws_external: {'note': 'dws is an independent external tool. OpenYida only shows installation instructions; it does not download or install it.', 'install_guide': 'Show official DingTalk CLI installation instructions'},
   cool_card: {'unsupported_environment': 'The Alibaba Group edition does not support building cool cards.', 'description': 'Create and read native YiDA cool cards (interactive and pinned)', 'usage': 'Usage: openyida cool-card <list|templates|create|get> <appType> [cardPageCode] [--type im|onebox] [--name <title>] [--page <n>] [--size <n>] [--search <text>] [--out <file>] [--json]', 'failed': 'Native cool card operation stopped: {0}'},
   data_card: {'description':'Create, configure, publish and distribute native YiDA data cards','usage':'Usage: openyida data-card <list|create|get|save|publish|probe|release-get|release-save|release-check|release-test|refs> <appType> [cardCode] [--name <title>] [--description <text>] [--schema <file>|--config <file>] [--expected-hash <hash>] [--backup <file>] [--out <file>] [--published|--version <version>] [--page <n>] [--size <n>] [--search <text>] [--allow-send] [--json]','failed':'Native data card operation stopped: {0}','conflict':'The draft changed. Read it again before saving or publishing.','mismatch':'Readback does not match the expected schema or published state. Keep the backup and inspect the card before retrying.'},
@@ -143,6 +154,7 @@ module.exports = {
   // ── bin/yida.js printHelp() ────────────────────────
   help: {
     cmd_custom_button: 'Native custom buttons: inspect and configure form edits, automation flows and page links',
+    cmd_form_message: 'Native form notifications: inspect triggers, recipients and templates, then safely maintain bindings',
     cmd_check_design: 'Validate design documents, theme tokens and PRD handoff',
     subtitle: 'AI-powered low-code development tool for Yida',
     usage: 'Usage:',

package/lib/core/locales/zh.js

@@ -19,6 +19,17 @@ module.exports = {
     'limit': '单个表单最多支持 10 个自定义按钮。',
     'readback_mismatch': '保存后的配置与回读不一致，请保留备份并检查远端状态。'
   },
+  form_message: {
+    usage: '用法：openyida form-message <list|inspect|options|create|update|delete> <appType> <formUuid> [messageId] [--config <文件>] [--expected-hash <哈希>] [--backup <文件>] [--yes] [--json]',
+    invalid_config: '消息通知配置或参数无效：{0}',
+    invalid_response: '平台返回的消息通知配置不完整：{0}',
+    api_error: '表单消息通知接口失败：{0}。请检查登录、表单管理权限、组织版本和功能开关。',
+    not_found: '目标表单中不存在消息通知：{0}',
+    conflict: '消息通知在读取后发生变化，请重新查询后再保存。',
+    unsupported_trigger: '当前 CLI 尚未验证此触发规则的写入协议：{0}。仍可查询已有配置。',
+    unsupported_form: '当前 CLI 尚未验证此表单类型的消息通知写入协议：{0}。仍可查询已有配置。',
+    readback_mismatch: '保存后的消息通知与回读不一致，请保留备份并检查远端状态。',
+  },
   dws_external: {'note': 'dws 是独立的外部工具；OpenYida 仅提供安装指引，不下载或安装它。', 'install_guide': '显示钉钉 CLI 官方安装指引'},
   cool_card: {'unsupported_environment': '集团版不支持酷卡片搭建。', 'description': '创建和读取宜搭原生酷卡片（交互卡片与置顶卡片）', 'usage': '用法： openyida cool-card <list|templates|create|get> <appType> [cardPageCode] [--type im|onebox] [--name <title>] [--page <n>] [--size <n>] [--search <text>] [--out <file>] [--json]', 'failed': '原生酷卡片操作已停止：{0}'},
   data_card: {'description':'创建、配置、发布原生数据卡片并管理投放播报','usage':'用法： openyida data-card <list|create|get|save|publish|probe|release-get|release-save|release-check|release-test|refs> <appType> [cardCode] [--name <title>] [--description <text>] [--schema <file>|--config <file>] [--expected-hash <hash>] [--backup <file>] [--out <file>] [--published|--version <version>] [--page <n>] [--size <n>] [--search <text>] [--allow-send] [--json]','failed':'原生数据卡片操作已停止：{0}','conflict':'卡片草稿已发生变化，请重新读取后再保存或发布。','mismatch':'回读配置或发布状态与预期不一致，请保留备份并检查卡片后再重试。'},
@@ -143,6 +154,7 @@ module.exports = {
   // ── bin/yida.js printHelp() ────────────────────────
   help: {
     cmd_custom_button: '原生自定义按钮：查询、配置填写表单、自动化流及页面跳转',
+    cmd_form_message: '原生表单消息通知：查询触发、接收对象与模板并安全维护配置',
     cmd_check_design: '检查设计文档、主题变量与 PRD 交接',
     subtitle: '宜搭低代码 AI 开发工具',
     usage: '用法:',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openyida",
-  "version": "2026.10.22",
+  "version": "2026.10.23",
   "description": "OpenYida CLI - 宜搭低代码 AI 开发工具（安装即用，零配置）",
   "bin": {
     "openyida": "bin/yida.js",

package/yida-skills/SKILL.md

@@ -144,7 +144,7 @@ Fast / Plan 选定的主题和主色属于整个应用：导航、原生页、
 | `yida-skills/context` | 登录、退出、切换组织、组织版本/容量、Schema、fieldId、执行前检查 | `yida-login`、`yida-logout`、`yida-basic-info`、`yida-get-schema`、`yida-corp-efficiency` |
 | `yida-skills/app` | 从零搭应用、完整系统、应用启停、应用导航、多语言、AI 老应用主题升级 | `yida-app`、`yida-create-app`、`yida-app-lifecycle`、`yida-nav-group`、`yida-i18n`、`yida-upgrade-app-theme`（仅明确升级要求并 ask_human 确认） |
 | `yida-skills/design` | 完整应用需求分析、PRD、视觉设计、单页 UI 改造、应用主题色、全局换肤、图片素材 | `yida-requirement-analysis`、`yida-prd`、`yida-design`、`yida-data-manage-ui`、`yida-image-assets` |
-| `yida-skills/form` | 表单字段、公式、校验、业务关联规则、原生自定义按钮、打印模板、批量录入、数据记录 | `yida-create-form-page`、`yida-custom-button`、`yida-print-template`、`yida-form-view`、`yida-formula`、`yida-formula-evaluate`、`yida-business-rule`、`yida-canvas-table-form`、`yida-table-form`、`yida-data-management` |
+| `yida-skills/form` | 表单字段、公式、校验、业务关联规则、原生自定义按钮、消息通知、打印模板、批量录入、数据记录 | `yida-create-form-page`、`yida-custom-button`、`yida-form-message`、`yida-print-template`、`yida-form-view`、`yida-formula`、`yida-formula-evaluate`、`yida-business-rule`、`yida-canvas-table-form`、`yida-table-form`、`yida-data-management` |
 | `yida-skills/process` | 审批、流程表单、流程规则、节点/分支/字段权限、流程代理 | `yida-create-process`、`yida-process-rule`、`yida-flow-node-config`、`yida-agent-center` |
 | `yida-skills/page` | 工作台、办事门户、任务看板、自定义展示页、页面源码开发、平台 JSX 组件页面维护、页面发布、页面内导航、PPT 页面 | `yida-create-page`、`yida-canvas-custom-page`、`yida-custom-page`、`yida-canvas-data-binding`、`yida-task-center`（仅显式选择自定义待办）、`yida-canvas-upgrade`、`yida-publish-page`、`yida-openyida-publish-guard`、`yida-density`、`yida-nav-shell`、`yida-ppt-slider` |
 | `yida-skills/analytics` | 用户显式指定宜搭原生数据卡片（含其投放播报）；聚合表、虚拟视图、报表、统计、图表、Recharts、ECharts、经营分析看板、驾驶舱、大屏 | `yida-data-card`、`yida-aggregate-table`、`yida-report`、`yida-rechart`、`yida-chart`、`yida-dashboard` |
@@ -200,6 +200,7 @@ Fast / Plan 选定的主题和主色属于整个应用：导航、原生页、
 | 业务操作队列、业务工作台或办事门户页面 | `yida-canvas-custom-page`；接业务数据时加载 `yida-canvas-data-binding`，不因页面名称或辅助统计转为经营看板；不顺带新增自定义审批待办中心 |
 | 批量录入、表格填写、多行编辑 | 默认 `yida-canvas-table-form`；已检测到平台 JSX 组件页面、native 页面或存量源码使用 `this.utils.yida.saveFormData` 时用 `yida-table-form` |
 | 页面设置中的自定义按钮、客户跟进/分配、审批后发起订单、按钮触发自动化或打开页面 | `yida-custom-button`；配置原生按钮定义和显示位置，自定义页面内 React 按钮不走此入口 |
+| 页面设置中的消息通知、表单提交/编辑/删除/评论后通知、原生工作通知与详情/置顶卡片 | `yida-form-message`；选择发送时机、接收人和七种消息样式，保存后核对配置；按用户要求执行真实发送测试，沿用已明确的接收对象与测试授权 |
 | 打印这条数据/数据详情链接、原生打印模板、打印设置、订单/报价/出入库/审批单、单据版式与字段明细、字段二维码/条形码、备份恢复和PDF生成 | `yida-print-template`；复用已有表单和模板，以真实打印字典生成动态内容；Word组件、叮当打印和浏览器页面打印不走此入口 |
 | 原生数据管理页视图列表、显示列配置、字段显隐与顺序、列宽、冻结列、默认筛选、多视图 | `yida-form-view`；使用原生配置读写，保存前备份并回读，不通过 CSS 隐藏字段或重建自定义列表 |
 | 当前数据管理页换风格、只留横线、突出新增/筛选/行操作、列级强调、状态列标签、数据管理 UI 异常、自定义简单数据管理 | `yida-data-manage-ui`（优先于通用美化）；保留承载类型和业务，从目标推导维度、定位 token/CSS 并按页改写；备份发布并实测，不要求选择配方 |

package/yida-skills/skills/yida-form-message/SKILL.md

@@ -0,0 +1,53 @@
+---
+name: yida-form-message
+description: 为已有普通表单配置消息通知，选择新增、编辑、删除或评论后的发送时机、接收人和消息样式。支持工作通知、详情卡片、图文卡片、评论卡片和群置顶卡片等七种模板；按用户要求执行真实发送测试。
+---
+
+# 表单消息通知
+
+为已有普通表单配置“什么时候、向谁、发送什么通知”。使用 `openyida form-message` 查询、新增、修改和删除「页面设置 > 消息通知」中的配置。保存后，表单事件发生时发送通知。
+
+## 适用场景
+
+| 用户需求 | 使用入口 |
+| --- | --- |
+| 配置表单新增、编辑、删除或评论后的消息通知 | 本技能 |
+| 查询日期定时、流程开始/结束、流程节点或审批操作的已有通知 | 本技能查询；这些类型的修改使用宜搭页面 |
+| 配置集成自动化中的通知节点 | `yida-integration` |
+| 应用级通知、自定义页面消息、机器人消息 | 对应功能入口，独立于表单消息设置 |
+
+## 操作步骤
+
+1. 查询现有通知和可用选项，核实目标表单、字段、接收人和模板。
+2. 按用户要求准备配置文件，再创建或修改通知。首次配置可从[发送给发起人的示例](references/guide.md)开始。
+3. 核对保存结果中的 `readbackVerified: true`，交付可点击的消息通知配置链接（CLI 返回的 `configUrl`），附上通知 ID、标题、触发时机和接收对象。完整应用搭建和单点新增、修改通知均按此要求交付。用户要求真实测试时，按已指定的对象和范围执行并确认送达；已有明确授权可直接沿用。
+
+`configUrl` 指向该表单的消息通知列表，地址为 `<当前认证环境域名>/<appType>/admin/<formUuid>/settings/messageSetting`。使用返回的真实域名与标识；用户打开后可按通知标题找到本次配置。
+
+```bash
+openyida form-message list <appType> <formUuid> --json
+openyida form-message options <appType> <formUuid> --json
+openyida form-message inspect <appType> <formUuid> <messageId> --json
+openyida form-message create <appType> <formUuid> --config message.json --json
+openyida form-message update <appType> <formUuid> <messageId> --config patch.json --expected-hash <configHash> --json
+```
+
+## 配置规则
+
+普通表单支持新增、编辑、删除和评论后通知。接收对象支持指定人员、角色、表单人员字段和发起人；群置顶模板使用平台群 ID。模板中文名称、参数和选用方式见[配置指南](references/guide.md)。
+
+更新时 `template` 属性合并，`recipients`、`groups` 和 `template.fields` 数组整体替换。CLI 写入前自动备份并检查配置是否变化。遇到超时或回读不一致，保留 `backupPath`，先执行 `list` / `inspect` 确认远端状态，再决定下一步；不自动重放写请求。
+
+## 删除与测试
+
+用户明确要求移除通知时，先用 `inspect` 获取最新 `configHash`，再执行删除。平台当前提供配置删除功能，没有独立启停接口；`isSendMessage` 是平台原生字段，不是通知开关。
+
+```bash
+openyida form-message delete <appType> <formUuid> <messageId> --expected-hash <configHash> --yes --json
+```
+
+删除后重建会产生新 ID；备份保留原配置内容，恢复时需重新核对引用。真实测试使用独立测试目标，业务配置按用户指定的表单执行。测试前确认用户已授权触发表单事件及对应接收对象；交付时分别记录配置保存、事件触发和接收端送达结果。测试结束后，按用户要求保留或清理配置和数据。
+
+## 参考文件
+
+- [配置指南](references/guide.md)：四种触发、七种模板、接收对象、变量格式和配置示例。

package/yida-skills/skills/yida-form-message/references/guide.md

@@ -0,0 +1,111 @@
+# 表单消息通知配置
+
+选择触发时机、消息样式或接收对象，以及编写配置文件时，查阅本指南。
+
+## 场景与触发
+
+| 场景 | trigger | 说明 |
+| --- | --- | --- |
+| 新记录提醒 | `FORM_DATA_CREATE` | 表单创建成功后发送 |
+| 记录被修改 | `FORM_DATA_EDIT` | 任意编辑成功后发送；当前配置范围为整条记录的编辑事件 |
+| 删除审计提醒 | `FORM_DATA_DELETE` | 删除成功后发送，接收人需在删除后仍可解析 |
+| 评论协作提醒 | `FORM_COMMENT` | 评论成功后发送 |
+
+日期字段定时、流程开始/结束、到达节点和审批操作的已有通知支持查询；配置这些发送规则时，使用宜搭页面设置对应的时间、流程版本、节点和审批结果。
+
+## 七种消息样式
+
+| 页面名称 | `template.key` | 主要用途 | 内容参数 |
+| --- | --- | --- | --- |
+| 纯文本普通消息（工作通知） | `workNotice` | 向接收人发送文字提醒 | `content` |
+| 图文详情卡片 | `detailImage` | 用图文卡片展示表单字段，配置详情入口 | `fields` |
+| 图文卡片 | `imageCard` | 用图文展示通知内容 | `content` |
+| 纯文本详情卡片 | `detailText` | 用文字卡片展示表单字段，配置详情入口 | `fields` |
+| 图文评论卡片 | `commentCard` | 展示通知内容，配置评论入口 | `content` |
+| 图文群置顶卡片 | `pinnedImage` | 在指定群中置顶图文通知 | `content` |
+| 纯文本详情置顶卡片 | `pinnedText` | 在指定群中置顶文字通知，配置详情入口 | `content` |
+
+前五种模板通过 `recipients` 选择接收人；后两种通过 `groups` 选择群。七种模板均有配置支持，实际送达、详情跳转、评论和群置顶效果分别在接收端验证。
+
+## 配置示例
+
+### 发送给发起人
+
+将下面的配置保存为 `message.json`，用于普通表单新增后通知发起人：
+
+```json
+{
+  "trigger": "FORM_DATA_CREATE",
+  "recipients": [
+    {"type": "variable", "value": "originator"}
+  ],
+  "groups": [],
+  "template": {
+    "key": "workNotice",
+    "title": "订单已提交",
+    "content": "订单 $!{serialNo} 已提交，请及时处理",
+    "fields": [],
+    "image": [],
+    "button": null
+  }
+}
+```
+
+变量格式为 `$!{变量或字段ID}`。系统字段从 `options.systemFields` 选取；表单字段从 `options.messageFields` 选取实际 ID。详情卡片中的 `fields` 也使用这两类选项。
+
+### 展示表单详情
+
+下面的金额字段 ID 替换为 `options.messageFields` 中的实际 ID：
+
+```json
+{
+  "trigger": "FORM_DATA_CREATE",
+  "recipients": [{"type": "variable", "value": "originator"}],
+  "groups": [],
+  "template": {
+    "key": "detailText",
+    "title": "订单详情",
+    "fields": [
+      {"type": "variable", "value": "serialNo", "title": "流水号"},
+      {"type": "formField", "value": "实际金额字段ID", "title": "金额"}
+    ],
+    "image": [],
+    "button": {"name": "查看详情", "type": "formInstDetail", "value": ""}
+  }
+}
+```
+
+`detailImage` / `detailText` 使用 `fields`；`workNotice` / `imageCard` / `commentCard` / `pinnedImage` / `pinnedText` 使用 `content`。`button.type` 可为 `formInstDetail`、`comment` 或 `custom`；自定义链接仅接受无账号密码的 HTTP(S) URL。
+
+### 在群中置顶
+
+群置顶模板把 `recipients` 设为空，并提供平台返回的群标识：
+
+```json
+{
+  "trigger": "FORM_DATA_EDIT",
+  "recipients": [],
+  "groups": [{"cid": "实际群ID", "name": "业务群"}],
+  "template": {
+    "key": "pinnedText",
+    "title": "订单状态更新",
+    "content": "订单状态已更新",
+    "fields": [],
+    "image": []
+  }
+}
+```
+
+## 接收对象
+
+- `employee`：指定人员的平台 ID，选择目标组织中仍有效且可见的人员。
+- `role`：宜搭角色 ID；实际成员按触发时权限解析。
+- `formField`：目标表单中的人员字段，必须出现在 `options.recipientFields`。
+- `variable`：当前仅支持原生 `originator`（发起人）。
+- `groups`：原生群置顶卡片目标；群权限、酷应用支持和成员关系仍由平台校验。
+
+向指定人员发送时，将接收项设为 `{"type":"employee","value":"实际人员ID"}`；向表单人员字段中的成员发送时，使用 `{"type":"formField","value":"实际人员字段ID"}`。一次消息最多选择 100 人，具体可见范围和可用能力以目标组织为准。
+
+## 备份位置
+
+创建、修改和删除配置时，CLI 自动把原配置备份到 `.cache/openyida/form-message/`。传入 `--backup` 可指定一个新的备份文件路径；操作返回的 `backupPath` 可用于查找该文件。

package/yida-skills/skills-index.json

@@ -49,6 +49,19 @@
       ],
       "requires_login": true
     },
+    {
+      "name": "yida-form-message",
+      "path": "skills/yida-form-message/SKILL.md",
+      "display_name": "表单消息通知",
+      "description": "配置普通表单新增、编辑、删除或评论后的消息通知，选择接收人和七种消息样式；保存后核对配置，按用户要求执行真实发送测试。",
+      "category": "yida-skills/form",
+      "tags": ["消息通知", "表单通知", "工作通知", "消息卡片", "群置顶卡片"],
+      "aliases": ["表单消息", "页面消息通知", "form-message"],
+      "positive_signals": ["配置表单提交后消息通知", "修改页面设置里的消息通知", "表单编辑后通知发起人", "查询消息通知接收对象", "配置表单原生消息卡片"],
+      "negative_signals": ["自定义页面发送消息", "机器人群消息", "应用级通知", "集成自动化发消息", "原生酷卡片资源"],
+      "command_ids": ["form-message"],
+      "requires_login": true
+    },
     {
       "name": "yida-cool-card",
       "path": "skills/yida-cool-card/SKILL.md",